New paths for Wayland sockets (Re: Enabling Android-style per application user ids)

[Pekka Paalanen]

On Fri, 3 Nov 2017 11:04:27 +0100 (CET)
Jan Engelhardt <jengelh at inai.de> wrote:

> On Friday 2017-11-03 10:37, Pekka Paalanen wrote:
> >  
> >> Summary of (individual) proposals follows.
> >>   
> >> >- modify WAYLAND_DISPLAY to support absolute paths which overrides
> >> >  any search paths    
> >> 
> >>  - introduce new WAYLAND_SOCKET
> >>  - modify WAYLAND_DISPLAY to reject '/'  
> >
> >What would be the functional difference to WAYLAND_DISPLAY accepting
> >absolute paths? Why would a different environment variable make a
> >difference?  
> 
> Well because you cannot establish for certain that people have or have not
> already used WAYLAND_DISPLAY=/newsock in the concatenation sense.
> 
> (Depending on who you ask and how much weight they give to it,
> breaking application interfaces is out of the question. That's all.)

Ah, that, ok. I thought this was about the security stuff you referred
to. But given the same rationale, we cannot forbid / in WAYLAND_DISPLAY
either.


Thanks,
pq
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.freedesktop.org/archives/wayland-devel/attachments/20171103/7acc6768/attachment.sig>